Executive brief
Splunk AI Toolkit versions before 6.0.0 contain a privilege escalation vulnerability that allows unprivileged users to execute searches with system-level permissions. An attacker without admin or power roles can access all data in the Splunk instance, modify system integrity, and view or delete search jobs belonging to other users. This could lead to unauthorized data access, data manipulation, and disruption of other users' activities.
Technical details
The vulnerability is an improper privilege management issue (CWE-863) in the Agent Run History handler. The flaw occurs because the handler improperly replaces the calling user's session key with a system authentication token before performing search operations, effectively bypassing role-based access controls. The vulnerability requires network access to the Splunk instance but no special preconditions beyond being a Splunk user. An authenticated attacker can leverage this to execute arbitrary searches with elevated privileges, access sensitive data, and manipulate or delete search jobs from other users. Fixed in versions 6.0.0 for the 5.7 branch and 6.0.1 for the 6.0 branch.
Affected products
- Splunk AI Toolkit below 6.0.0 (5.7 branch) and below 6.0.1 (6.0 branch)
Timeline
- 2026-08-19: disclosed
- 2026-08-19: patched: Fixed in versions 6.0.0 (5.7 branch) and 6.0.1 (6.0 branch)